AI AgentHigh
CVE-2026-13341: A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.…
- Occurred
- Jul 3, 2026
- Published
- Jul 3, 2026
- Source
- NVD CVE
Summary
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.
Tags
- CVE
- CVE-2026-13341
- cvss:HIGH
- agent-fail:injection-indirect
- agent-cause:missing-guardrail
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Vulnerability allows indirect prompt injection in an AI agent system, enabling unauthorized API execution.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8